Seems like that would be dependent on the timing of the test order and when that line was added.
Scott, can a variable be used in a filter with an equation like this: HEADER 0 CONTAINS %REVDNS%=64.214.161.171 John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kami Razvan Sent: Monday, August 18, 2003 4:49 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] IP address for REVDNS Scott: � The header shows the IP address of REVDNS in the form of: � X-Note: Sent from Reverse DNS:� mail.maskofnoreturn.com([65.214.161.171]). � Can the IP address be detected in the HEADER filter? � I want to setup a filter if certain IP addresses are listed in the Header.� Ideally I like to filter on the IP address of the REVDNS entry but since we can't it seems like the next best thing is to filter the header. � Since we started keeping track of the REVDNS IP addresses we are finding quite a lot of spammers with the same IP address in their REVDNS but different domain names.� I like to experiment with such a filter and evaluate the results. � Regards, Kami � � --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
